I’ve created a new API to the krb5_ functions, its for storing Kerberos related data in the credential cache.
- Realm configuration that is fetched runtime, for that the target is a domain that only should have Kerberos canonlization done and not dns canonlization
- Forwarded tickets, to avoid re-fetching the from the KDC
krb5_cc_get_config
krb5_is_config_principal
krb5_cc_set_config
There is a patch for MIT Kerberos that also includes this interface, so hopefully it will be included in MIT Kerberos 1.7.